Using Spreadsheet
Software to Perform a Security Risk Assessment
This proje
ct uses spreadsheet software to calculate anticipated annual losses
from various security threats identified for a small company.
Mercer Paints is a small but highly regarded paint manufacturing company
located in Alabama. The company has a network in plac
e linking many of its
business operations. Although the firm believes that its security is adequate,
the
recent addition of a Web site has become an open invitation to hackers.
Management requested a risk assessment. The risk assessment identified a
number
of potential exposures. These exposures, their associated probabilities,
and average losses are summarized in the following table.
Exposure
Probability of
Occurrence (%)
Average Loss
($)
Malware attack
60%
$75,000
Data loss
12%
$70,000
Embezzlement
3%
$30,000
User errors
95%
$25,000
Threats from hackers
95%
$90,000
Improper use by
employees
5%
$5,000
Power failure
15%
$300,000
In addition to the potential exposures listed, you should identify at least
three other potential threats to Mercer Paints, a
ssign probabilities, and
estimate a loss range.
Use spreadsheet software and the risk assessment data to calculate the
expected annual loss for each exposure.
Present your findings in the form of a chart
or charts
. Which control
points have the
greatest vulnerability?
What recommendations would
you make to Mercer
Paints? Prepare a written report that summarizes
your findings and
recommendations
Using Spreadsheet
Software to Perform a Security Risk Assessment
This proje
ct uses spreadsheet software to calculate anticipated annual losses
from various security threats identified for a small company.
Mercer Paints is a small but highly regarded paint manufacturing company
located in Alabama. The company has a network in plac
e linking many of its
business operations. Although the firm believes that its security is...